Interestingly enough there was recently a long debate about xss escaping over in the Mojo irc channel. They obviously have their own temptation engine which uses Mojo::DOM in parts (which includes the xss_escape code).

I'm envisioning the we'll end up needing to do that digging into Template::Stash::AutoEscaping and would suggest whoever does perhaps bases some enhancements on the mojo code ;-)

For reference: http://irclog.perlgeek.de/mojo/2016-02-09#i_12010985 , https://github.com/kraih/mojo/commit/ccbd7e92ffe2029e83f14e077095d6ddda27cd1c

Martin

_______________________________________________
Koha-devel mailing list
Koha-devel@lists.koha-community.org
http://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-devel
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/